Duo Trans Privacy Policy

We attach great importance to protecting your personal information and privacy. Duo Trans Shipper App is an application software product (referred to as "Product/Service") that provides users (referred to as "you") with online logistics information exchange, online cargo transportation transaction services, and other logistics value-added services.

The necessary personal information for the Duo Trans Shipper App includes: 1. Mobile phone number; 2. Cargo source information; 3. Identity information; 4. Push notification information; 6. Chat information; 7. File information. This App is developed and operated by Xi'an Duo Trans Logistics Technology Co., Ltd. [Registered address: Room 503, 5th Floor, Yizhongliu Science and Technology Innovation Center Accelerator, No. 789 Tiangu 6th Road, Gaoxin District, Xi'an City, Shaanxi Province; (1) Direct customer service: 4001158661; (2) Email: logistics@duotrans.cn]. Xi'an Duo Trans Logistics Technology Co., Ltd. (hereinafter referred to as "we", "us", or "our") deeply understands the importance of your personal information and will do our utmost to protect the security of your personal information. We are committed to maintaining your trust in us and adhering to the following principles to protect your personal information: accountability, purpose limitation, consent, data minimization, security, user participation, transparency, etc. Concurrently, we promise to adopt industry-standard security measures and appropriate security protection methods to safeguard your personal information.

This policy will help you understand the following:
1. The purpose, methods, and scope of our collection, use, storage, sharing, transfer, and public disclosure of your personal information;
2. Our information security protection measures;
3. Your rights to manage your personal information and how to exercise them.

This policy applies to the "Duo Trans Shipper App and related platform products and services (collectively, the "Duo Trans Cross-Border Trucking Digital Service Platform" or "Platform").

You can read the corresponding sections according to the following index to learn more:
1. How We Collect and Use Your Personal Information
2. How We Use Cookies and Similar Technologies
3. How We Store and Protect Your Personal Information
4. How We Use Your Personal Information
5. How We Entrust Processing, Share, Transfer, and Publicly Disclose Your Personal Information
6. Other Lawful Bases for Processing Your Personal Information
7. How You Can Exercise Your Personal Information Subject Rights
8. How We Protect the Personal Information of Minors
9. Updates and Revisions to This Policy

1. How We Collect and Use Your Personal Information

1.1 Basic Business Functions

1.1.1 Login/Registration
Duo Trans provides services through a unified account system across all its applications. Any product or service of Duo Trans Company (Duo Trans Shipper Version) can be logged into by verifying a real-name registered mobile phone number via SMS verification code. Each platform requires verification code upon login, and accounts for each platform are managed independently, without sharing between platforms, including your profile data. When you use the platform services, you need to create an account and complete your profile on the platform. By your active provision, the platform will collect the following information:

1.1.2 Scope of Necessary and Non-essential Information
The Duo Trans App provides two login methods: (1) Login using mobile number + verification code; (2) Login using mobile number + password. If you haven't registered a Duo Trans account yet, you need to click "Register New User" on the login page and fill in necessary registration information before logging in.
When you register as a shipper user or log in, you need to provide your mobile number and verification code, so we can identify your identity on the platform and provide platform services to you. This type of information is necessary for this function. If you do not provide it, you will not be able to register/login. If you use the "One-click login with this device number" method for registration/login, we will collect your third-party account information. This is non-essential information. If you refuse, you can log in by manually entering your mobile number.

1.1.3 Involved Third Parties
One-click Login/Registration with Device Number: When you log in or register, we will use the Alibaba Cloud SMS SDK functionality to provide you with SMS login services. This SDK is only used for obtaining account verification codes. Our system does not access other personal information of yours. When you receive the verification code, simply enter it as required. Service provider website: https://www.aliyun.com/.

1.2 Push Notifications
When the platform updates new features, announces relevant welfare policies/activities, or when order status changes, the system will send message notifications to your mobile phone, which you can view. If you refuse to use the push function, the system will not be able to push relevant information to your phone normally.

1.2.1 Scope of Necessary and Non-essential Information
When you use the push function (device system push function), so that we can still push information to you even when you are outside the App. We will collect and use your operating system version, network environment, telecom operator, and device model. This type of information is necessary for this function. If you do not provide this type of information, you will not be able to use this function.

1.2.2 Involved Third Parties
JPush SDK, Service Provider Name: Shenzhen Hexun Huagu Information Technology Co., Ltd. To promptly push service notifications to you, we use the JPush SDK. This SDK requires obtaining your phone's storage permission, phone status permission, unique device identifier (IMEI number), device identification information (such as GAID), network information, location information, OAID, GAID, IMSI, MEID, SSID, WIFI information (wifi_name), SSID (WiFi network name), AndroidID, ability to write/read SD card data (public storage area), installed application list on the device, IP, and specified package name information to realize the message push function. Service provider website: https://www.jiguang.cn.
Xiaomi Push SDK, Service Provider Name: Beijing Xiaomi Technology Co., Ltd. To promptly push service notifications to Xiaomi devices, we use the Xiaomi Push SDK. This SDK requires obtaining unique device identifier (IMEI), device model, device storage, system type, system version, app version, network type, SIM card operator information, device location, device OAID and encrypted AndroidID, device manufacturer, device memory, Xiaomi Push SDK version. Service provider website: https://www.mi.com/.
Huawei Push SDK, Service Provider Name: Huawei Software Technology Co., Ltd. To promptly push service notifications to Huawei devices, we use the Huawei Push SDK. This SDK requires obtaining unique device identifier (IMEI), AAID (Application Anonymous Identifier), App Token, Topic subscriptions, device storage information, Androidid information, and running processes. Service provider website: https://www.huawei.com/cn.
OPPO Push SDK, Service Provider Name: Guangdong Heytap Technology Co., Ltd. To promptly push service notifications to OPPO devices, we use the OPPO Push SDK. This SDK requires obtaining device identifiers (such as IMEI or OAID, IMSI, AndroidID), device model, system version information, app information (such as package name, version number), network information (such as IP or domain connection results, network type), external storage permission, installed application list on the device, and specified package name information. Service provider website: https://www.heytap.com.
vivo Push SDK, Service Provider Name: Vivo Mobile Communication Co., Ltd. To promptly push service notifications to vivo devices, we use the vivo Push SDK. This SDK requires obtaining device identification information (IMEI, OAID, EmmCID, GUID, GAID, encrypted AndroidID), currently running processes, device model, system information, network information (such as IP address, network type), external storage permission, and running processes. Service provider website: https://www.vivo.com.cn.
Meizu Push SDK, Service Provider Name: Zhuhai Meizu Communication Equipment Co., Ltd. To promptly push service notifications to Meizu devices, we use the Meizu Push SDK. This SDK requires obtaining unique device identifier (IMEI), device model, system type, system version, network type, device app list information, MAC address, and operator information. Service provider website: https://www.meizu.com.
Honor Push SDK, Service Provider Name: Shenzhen Honor Software Technology Co., Ltd. To promptly push service notifications to Honor devices, we use the Honor Push SDK. This SDK requires obtaining device identification information (IMEI, OAID, EmmCID, GUID, GAID, encrypted AndroidID), currently running processes, device model, system information, network information (such as IP address, network type), external storage permission, and running processes. Service provider website: https://www.honor.com/cn/.

1.3 Chat/File Transfer
When you use the chat/file transfer function, we will collect and use your mobile number, IMEI, IDFA, IDFV, AndroidID, MEID, MAC address, OAID, IMSI, ICCID, GAID, hardware serial number), and current application information (app name, app version number). Your network identity identification information will help us maintain normal software usage and ensure safe usage; you can grant device microphone permission to input voice, during which we use your voice content; based on the permissions you grant, we will receive and record your common device information to optimize your software usage experience.

1.3.1 Scope of Necessary and Non-essential Information
We will not share, transfer, or publicly disclose any of your personal information. We promise not to actively share, transfer, or publicly disclose your personal information with any third party unless required by laws and regulations or with your prior explicit consent.

1.3.2 Involved Third Parties
Chat/File Transfer SDK, Service Provider Name: Beijing Yehuo Infinite Network Co., Ltd. For online chat and file transfer, we use the Beijing Yehuo Infinite Network Co., Ltd. SDK. During this process, information collected includes: mobile number, IMEI, IDFA, IDFV, AndroidID, MEID, MAC address, OAID, IMSI, ICCID, GAID, hardware serial number), current application information (app name, app version number) to complete normal chat and file sending functions. Third-party privacy policy: https://www.duotrans.cn/yinsi/IM.html.

1.4 Cargo Information Page/Customer Service Page - Access to Camera/Album Permissions
When adding cargo images on the Cargo Information Page, you need to access the album or camera permission. When uploading cargo images on the Cargo Information Page, the system requires the shipper's authorization to access camera and album permissions for image uploads; similarly, when uploading images on the Customer Service Page, camera/album permissions are required. Uploaded images are solely for cargo items. *We promise that uploaded images contain no inappropriate content.

1.5 Customer Service File Upload
When uploading files on the Customer Service Page, you can upload via WeChat or local upload. Uploading via WeChat requires invoking the Duo Trans WeChat Mini Program to open your WeChat contacts. Local file upload requires accessing your local file manager. During the upload process, you may take photos or transfer images, requiring access to your camera and album permissions.
Information Collected: We will collect the name, type, size, and the file itself of the file you selected. The platform will organize the files you upload, and you can view them in the file statistics function.
Information Use: Uploaded files are only used for order completeness verification and will not be used for any other unauthorized purposes.

1.6 Customer Service Page - Access to Phone Permission
When shippers need to make a phone inquiry, they can call the customer service hotline. Making a call requires obtaining relevant permissions. The number dialed is the Duo Trans 400 customer service number. We promise not to access your phone's contacts.

1.7 Other Information
Carpooling: Warehouse location information and related contact information.
*Both pieces of information are required by the program; without them, the App cannot function normally.
1.7.1 Scope of Necessary and Non-essential Information
We promise: Warehouse location and related contact information are only used for the shipper to transport goods to that location, allowing communication with the warehouse contact during transit; detailed cargo route information and the shipper's contact number are used to input the pickup and delivery locations. Data usage scope: The above information is limited to achieving the purpose of the current function.

1.8 App Compatibility
1.8.1 Scope of Necessary and Non-essential Personal Information
To ensure App compatibility across different systems and devices for users, we will collect your device name, model, operating system information, software version number, network quality data, network access method, type, status, and name (WiFi BSSID information), as well as screen resolution, screen size, CPU architecture, memory capacity, disk capacity, browser type, IDFV. To determine whether user click behavior conforms to normal product processes and operations, we will collect log information, specific operation logs during software installation/use, and service log information; to determine whether the current device is a real device, used to protect your account security/anti-cheat/anti-fraud, we will collect your device's UUID, IDFA, OAID, Android ID, battery information, sensor list and information, memory information, SIM card status, operator information, specific application installation and usage information, log information, etc.

1.9 Functions Requiring Your Consent to Invoke System Permissions
When providing the aforementioned basic functions, or when third-party SDKs collect and use your personal information, the realization of some scenarios depends on your consent for the App or SDK to invoke your device permissions. Permissions used by the App include: Camera permission, Album permission, Notification permission, Phone permission, Storage permission.

2. How We Use Cookies and Similar Technologies

Cookies are a mechanism that supports servers (or scripts) to store and retrieve information on the client side. When you use our products or services, to provide you with a more relaxed and secure access experience, we may use cookies or similar technologies to collect and store information under specific circumstances, sending one or more cookies or anonymous identifiers to your device. We will not use cookies for any purposes other than those described in this policy. You can retain or delete cookies according to your preference. Disabling the cookie function will affect your ability to use some features and/or services.

3. How We Store and Protect Your Personal Information

3.1 Information Retention Period
We will retain your personal information for the minimum period necessary to provide our services. After the retention period expires, we will delete or anonymize your personal information in accordance with applicable laws and regulations. When you request deletion of personal information or account cancellation, we will delete or anonymize your personal information, except in the following cases:
3.1.1 During your use of the platform services, if there is or may be serious violations of laws/regulations, the violation records will be retained permanently to the maximum extent permitted by law;
3.1.2 If the platform ceases operations, we will announce this on the platform at least 30 days in advance. After cessation, we will stop collecting and commercially using personal information, and will delete or anonymize collected personal information after meeting the minimum retention period required by laws and regulations.

3.2 Information Storage Location
Your personal information will be stored and used within mainland China. Currently, we do not transfer personal information outside the country.

3.3 Protection Measures
We will adopt industry-standard security measures, implement strict data access control mechanisms, and employ multi-factor authentication technologies. This includes establishing data security monitoring systems, encrypted storage of sensitive data, using encrypted transmission protocols, applying the principle of least privilege, appointing a person responsible for personal information protection, and passing the Class 3 Information Security Level Protection certification. Concurrently, we have promulgated multiple systems and will promptly address security incidents and notify you.

4. How We Use Your Personal Information

To fulfill obligations under laws and regulations, provide services to you, and improve service quality, we will use your information in the following scenarios: ensuring service stability and security; improving existing platform services; sending service notifications or commercial information to you via phone, push, SMS, etc. (you can unsubscribe as provided); and conducting platform service statistics.

5. How We Entrust Processing, Share, Transfer, and Publicly Disclose Your Personal Information

To realize basic and extended business functions, we will only interact with third parties via APIs and SDKs for necessary data exchange for legitimate, proper, and necessary purposes. To ensure you receive push notifications promptly, the App integrates manufacturer and third-party PUSH SDKs, which may start automatically in the background based on the Android alarm clock mechanism. You can disable background app startup in your phone's system settings. You can learn more about our data provision to third parties through the "Third-Party SDK Information Collection Description".

5.1 Entrusted Processing: We may entrust affiliated companies or other professional organizations to process information, requiring them to comply with confidentiality obligations through agreements.
5.2 Sharing: We will only share your necessary information for legitimate, proper, and necessary purposes. For example, sharing with affiliated companies (unified account system), sharing with partners to realize App business functions, dispute resolution, etc. We will obtain your consent in specific scenarios or share in accordance with legal requirements.
5.3 Transfer: We generally do not transfer information. However, in the event of a merger, division, dissolution, etc., requiring the transfer of personal information, we will inform you of the recipient's information and require them to continue adhering to this policy.
5.4 Public Disclosure: We generally do not publicly disclose information unless required by law or with your explicit consent.

6. Other Lawful Bases for Processing Your Personal Information

The following circumstances do not require your authorization and consent: necessary for concluding a contract; necessary for performing statutory duties; responding to public health emergencies; news reporting for public interest; processing information that has been lawfully made public, as stipulated by laws and regulations.

7. How You Can Exercise Your Personal Information Subject Rights

7.1 Access, Correct/Modify Your Personal Information
Personal Nickname: You can modify your nickname information via the App's "My" -> "Profile", or "My" -> "Settings" -> "Personal Information".

7.2 Cancel Account
You can cancel via "My" -> "Settings" -> "Cancel Account". If unable to cancel through the above operation, contact customer service to submit a cancellation request. After cancellation, all account data will be irretrievable.

7.3 Complaints and Reports
You can click on customer service within the App. We will verify and handle your complaint or report within 15 working days.

8. How We Protect the Personal Information of Minors

Our products/services are fully intended for adults aged 18 and above; therefore, we do not collect personal information from minors. If you are a minor under 18, please do not use our products/services. If we inadvertently collect a minor's personal information, we will delete it within a reasonable time.

9. Updates and Revisions to This Policy

We reserve the right to update or modify this policy from time to time. We will post any changes to this policy on this page. For material changes, we will notify you through prominent means such as pop-ups, SMS, or in-app notifications. After this policy is revised, we will publish the latest version on the platform.